Skip to main content

News

  • Perplexity
  • SPACE agent sandbox
  • Agents

Perplexity shows why agent sandboxes need separate VM and network defenses

Perplexity's SPACE red-team report says nine models failed to escape a guest VM in 108 attempts, but four models bypassed partial network restrictions through DNS spoofing or shared-IP routing in 11 of 54 runs before fixes. No bypass succeeded in the fully disconnected setting, and Perplexity reports no verified bypass after remediation; the company explicitly cautions that not observing a VM escape does not prove isolation.

Published (date only)Updated 1 source

Primary source

Perplexity Research

Read the original: Escaping SPACE: Part I

Opens Perplexity Research in a new tab. Read it there before you rely on the summary above.

Unlock the full brief free.

  • What to check before you trust this story, written down
  • Each verified source, with why it matters and who published it
  • A note whenever a source has been withdrawn
  • Thirty days of stories to browse, not seven

This is not an account: there is no password, and the unlock is a cookie in this browser. You also join the Rise Productive newsletter from Demetri Panici, about once a week: what I built and what changed in AI. We'll email you a link to confirm, and you can unsubscribe in one click. The same signup unlocks every free tool on the site. How your email is handled.

Related on Rise Productive